SOP_FAIL_OPEN=1 was not preventing CI failures because three API calls
with `set -euo pipefail` would abort the script before reaching the
SOP_FAIL_OPEN eval block. Same fix as main branch PR #635.
Refs: sop-tier-check failure on staging PRs #617, #621, #587, #562